Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1D5TTJNp_kblfsoCneqw6gis4T0.roa
File:                     1D5TTJNp_kblfsoCneqw6gis4T0.roa (raw, json)
Hash identifier:          4n89CYBh1Gf4YWK5oPxwPlS4+6RA+top2my7GFvydjo=
Subject key identifier:   D4:3E:53:4C:93:69:FE:46:E5:7E:CA:02:9D:EA:B0:EA:08:AC:E1:3D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04FE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1D5TTJNp_kblfsoCneqw6gis4T0.roa
Signing time:             Tue 31 Mar 2026 08:19:14 +0000
ROA not before:           Tue 31 Mar 2026 08:19:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D43E534C9369FE46E57ECA029DEAB0EA08ACE13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:83:c5:72:ba:f0:51:e5:bb:fd:d2:00:59:
                    4e:47:dc:6f:4a:8b:55:1e:f1:2a:dc:76:93:b9:6d:
                    34:fc:30:b7:16:bd:b5:68:1e:ce:05:ad:a0:6f:13:
                    c9:f1:6f:2e:61:7e:6a:ce:66:0b:33:27:74:56:d2:
                    fe:0e:8a:97:8b:7e:30:88:05:f5:85:ea:2b:b5:e9:
                    87:80:3c:c3:10:f5:49:10:2b:cf:6f:b4:d1:9e:19:
                    f4:3d:6c:9c:9d:80:4f:90:65:b9:a3:fa:09:54:c2:
                    bb:35:90:06:da:6c:1d:2a:04:94:1c:a3:ea:7f:5e:
                    4e:9f:f3:29:7b:f5:24:b4:d8:9a:04:a6:0d:c0:bf:
                    86:cd:4b:19:78:a1:cb:45:6b:02:63:17:bf:86:cd:
                    ba:19:26:51:de:d9:49:d6:d6:4b:56:01:84:1f:ad:
                    fe:0a:bc:be:27:b4:fc:01:7c:2c:61:dd:0f:9f:72:
                    e8:fc:8c:5f:ff:ec:98:54:3e:17:01:9d:af:57:e5:
                    68:3c:da:b0:eb:45:de:6e:0e:b2:86:86:61:ee:25:
                    b2:99:2d:87:67:59:cc:a2:73:56:83:18:0b:fd:a6:
                    40:f4:81:f1:80:27:56:8f:6f:f4:00:db:0c:0f:9c:
                    bb:22:f7:03:2d:9e:9f:8d:bf:52:5c:ca:36:16:2c:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:53:4C:93:69:FE:46:E5:7E:CA:02:9D:EA:B0:EA:08:AC:E1:3D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1D5TTJNp_kblfsoCneqw6gis4T0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:27:c3:6a:09:1f:39:16:22:02:36:10:be:c6:a3:4f:4f:8c:
         6c:db:a4:99:18:06:f6:d1:0e:86:b9:b5:b5:bc:b7:fc:35:e5:
         6a:99:d2:0f:27:cf:77:72:26:8c:86:3b:ae:7d:cd:4d:fe:94:
         47:2b:4b:41:5e:20:19:ae:08:76:56:7d:1d:bf:c9:c6:e3:a9:
         e6:2a:4e:eb:f4:26:ac:87:4a:07:98:4b:e2:66:e7:39:10:c3:
         82:b2:02:c2:45:0e:d7:e6:e4:e3:06:32:60:59:e0:8b:8a:6f:
         64:62:f6:e0:3d:42:40:e5:9e:e5:a1:1f:e9:05:9c:64:31:ad:
         98:73:8d:12:75:e6:7b:17:f0:88:6d:18:f3:a6:9c:a6:c6:22:
         0e:17:a2:d5:2b:24:75:7b:5e:64:2a:dc:14:fa:89:7f:ec:db:
         26:c1:dd:46:b9:1a:0d:60:f5:0f:8e:ed:db:d1:9e:f3:cc:48:
         6c:f8:c9:69:9e:5f:43:c5:4d:7b:ed:e5:03:bf:0b:5f:72:cd:
         15:42:6f:39:69:91:d2:3c:4e:e5:20:0f:4d:5e:09:0d:42:2b:
         c3:4a:d6:b7:ae:ac:f1:25:52:e4:11:b5:24:e6:11:9e:dc:ee:
         fd:ae:24:20:10:cb:91:91:b0:d5:e8:b2:52:8a:2d:de:ea:a6:
         92:fb:ca:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:17 2026 by rpki-client